CVE-2018-6574

This repository holds a PoC of the CVE-2018-6574 "go get RCE", that allowed to execute commands when downloading a 3rd party package. This could be done, as the cflags allowed to set an external library. In this PoC, the external library executes a command on the constructor...

CVE-2022-31144

CVE-2022-31144 CVE-2022-31144 dos redis. Rce not finished yet...

CVE-2026-34159

CVE-2026-34159 0 Click RCE exploit for CVE-2026-34159 Lama.cpp RPC server version b8487 exploit was developed by Hassan Ali @Casp3r0x0 you can find the full write up at https://www.pwntricks.com/ZeroClick-RCE-CVE-2026-34159-llama.cpp...

CVE-2010-1872-BlazeDVD-SEH-Exploit

BlazeDVD 5.0 - '.PLF' Playlist SEH Buffer Overflow Exploit CVE-2010-1872 Proof-of-Concept PoC exploit targeting a buffer overflow vulnerability in BlazeDVD version 5.0 via a crafted .plf playlist file. The exploit uses SEH Structured Exception Handler overwrite to achieve code execution. Details...

CVE-2022-31691

CVE-2022-31691 A write-up of my so far inconclusive look into CVE-2022-31691. Background I'm a frequent user of the Spring Tool Suite STS for Eclipse, and tend to rely on it to initialise new Spring Boot projects. This vulnerability see https://tanzu.vmware.com/security/cve-2022-31691 is an RCE...

vulnerability_struts-2.3.31

vulnerabilitystruts-2.3.31 Build the struts-2.3.31 CVE-2017-5638 environment. https request is possible. environment Ubuntu 20.04 Docker 20.10.12 curl 7.68.0 Server Startup We will use the tomcat:7.0-jre8 docker image. Unzip struts-2.3.31.zip in a directory of your choice. cd struts-2.3.31 sudo...

Log4shell

Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...

CVE-2026-118338

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw in the Animation component. A remote attacker could exploit this by providing a crafted HTML page to potentially achieve arbitrary code execution inside the sandbox. No specific exploit details or direct mitigat...

CVE-2026-118338

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118338

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118309

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118309

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118312

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118312

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118356

A Use after free vulnerability exists in the WTF component of Google Chrome prior to version 156.0.8078.73 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page to the victim. The vulnerability has been observed in the wild according to e...

CVE-2026-118309

Google Chrome on Android versions prior to 156.0.8078.73 are vulnerable to a high-severity issue caused by improper input validation in the UI. A remote attacker can exploit this by using a crafted HTML page to potentially execute arbitrary code outside the sandbox . For the Debian stable distrib...

CVE-2026-118312

A memory corruption vulnerability exists in the Paint component of Google Chrome in versions prior to 156.0.8078.73 . This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page. The vulnerability is categorized as a Medium sev...

CVE-2026-118315

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a high-severity security issue caused by improper input validation in SVG . A remote attacker could exploit this by using a crafted HTML page to potentially execute arbitrary code inside the sandbox. The vulnerability impacts confide...